Option 2 - Hidden Text
The Sender responsibilities are outlined under the three methods of collecting PII or FERPA data within DocuSign.
When utilizing either the DocuSign application or any DocuSign integrations (Outlook or Word) the creator or initiator of an envelope, the individual selecting “Send an Envelope”, is considered the “Sender” of that envelope. The “Sender” is responsible for using the “Hide text with asterisks” feature on any Text field added to the document that may request PII or FERPA protected data.
Templates can be created by any DocuSign User with the appropriate permission. Templates can also be shared between DocuSign Users. When you select the “Use Template” option you are initiating an envelope and you become the envelope “Sender”. Depending on the steps taken and permissions granted to DocuSign Users the Template may be restricted to modification. As a “Sender” you are responsible for ensuring that the “Hide text with asterisks” feature is enabled on any Text field added to the document that may request PII or FERPA protected data. This may require testing the appropriate text fields to ensure data is masked with astericks or contacting the Template owner to ensure PII or FERPA requested data is protected.
Powerforms are created based off a DocuSign Template. The Template owner is converted to be the default DocuSign Powerform “Sender”. The Powerform owner or a DocuSign Admin are allowed to change the “Sender” of a Powerform as required. When using a DocuSign Powerform with PII or FERPA protected data, if astericks do not appear in the field that should be protected, upon tabbing or selecting another field, then the Powerform owner should be contacted to ensure appropriate safeguards are in place on the Powerform.
The DocuSign “Attachment Tag” should never be provided on a document if the intent is to request an image or file that contains PII or FERPA protected information. Attachments added via the Attachment tag, by a recipient, cannot have PII or FERPA data masked within the attached image or file.
Hiding Text and Form Data
DocuSign articles outlining the process for Data Masking PII and FERPA as well as how to see this masked data.